./mail/dovecot, Secure IMAP and POP3 server

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]


Branch: pkgsrc-2010Q2, Version: 1.2.13, Package name: dovecot-1.2.13, Maintainer: ghen

Dovecot is an open source IMAP and POP3 server, written with security
primarily in mind. It supports Maildirs and mbox formats, and has
complete IMAP4rev1 support, TLS/SSL support, and is IPv6 ready.


Required to build:
[devel/pkg-config] [devel/libtool-base]

Package options: kqueue, ssl

Master sites:

SHA1: 8a6e12cc40df02083480f9e9eef57939a81fd7af
RMD160: 083dd4504dbf0e86187019853514811155c9087f
Filesize: 2877.073 KB

Version history: (Expand)


CVS history: (Expand)


   2010-07-26 11:08:01 by Matthias Scheler | Files touched by this commit (3) | Package updated
Log message:
Pullup ticket #3185 - requested by ghen
mail/dovecot: security update

Revisions pulled up:
- mail/dovecot/Makefile			1.150
- mail/dovecot/PLIST			1.28
- mail/dovecot/distinfo			1.112
---
Module Name:	pkgsrc
Committed By:	ghen
Date:		Sun Jul 25 22:17:20 UTC 2010

Modified Files:
	pkgsrc/mail/dovecot: Makefile PLIST distinfo

Log message:
Update Dovecot to 1.2.13.

This release fixes a bug in ACL plugin, which could be considered a security
bug: If Maildir is used with default settings (INBOX is same as Maildir root
dir) and user set some ACLs to INBOX, those ACLs were copied to all newly
created mailboxes. This should have been done only for "default ACLs", \ 
but with
Maildir the INBOX directory is the same as the default ACL directory, so this
mixup happened. This bug exists only in v1.2.x releases.

Other fixes:

- Fixed iconv() crash when it was processing several kilobytes of broken
  continuous input. This mainly could have caused a problem with IMAP SEARCH.
  Possibly also with some Sieve checks.
- If MIME encoded-words contained line feeds, Dovecot logged cache corruption
  errors.
- mbox: Renaming mailbox under newly created dir didn't move index directory.
- mbox: When generating envelope to From_-line, don't append a second
  @owndomain if username already has one.